Turns out this actually works and is needed

pinauten · Jun 14, 2023 · af49e5d · af49e5d
1 parent 6777d1b
commit af49e5d
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/BaseBin/_shared/sandbox.h b/BaseBin/_shared/sandbox.h
@@ -84,6 +84,10 @@ extern const uint32_t SANDBOX_EXTENSION_NO_STORAGE_CLASS;
 extern const uint32_t SANDBOX_EXTENSION_PREFIXMATCH;
 extern const uint32_t SANDBOX_EXTENSION_UNRESOLVED;
 
+int sandbox_init(const char *profile, uint64_t flags, char **errorbuf);
+int sandbox_init_with_parameters(const char *profile, uint64_t flags, const char *const parameters[], char **errorbuf);
+int sandbox_init_with_extensions(const char *profile, uint64_t flags, const char *const extensions[], char **errorbuf);
+
 int sandbox_check(pid_t, const char *operation, enum sandbox_filter_type, ...);
 int sandbox_check_by_audit_token(audit_token_t, const char *operation, enum sandbox_filter_type, ...);
 int sandbox_check_by_uniqueid(uid_t, pid_t, const char *operation, enum sandbox_filter_type, ...);

diff --git a/BaseBin/systemhook/src/main.c b/BaseBin/systemhook/src/main.c
@@ -263,7 +263,7 @@ bool dlopen_preflight_hook(const char* path)
 	return dlopen_preflight(path);
 }
 
-/*int sandbox_init_hook(const char *profile, uint64_t flags, char **errorbuf)
+int sandbox_init_hook(const char *profile, uint64_t flags, char **errorbuf)
 {
 	int retval = sandbox_init(profile, flags, errorbuf);
 	if (retval == 0) {
@@ -288,7 +288,7 @@ int sandbox_init_with_extensions_hook(const char *profile, uint64_t flags, const
 		unsandbox();
 	}
 	return retval;
-}*/
+}
 
 int ptrace_hook(int request, pid_t pid, caddr_t addr, int data)
 {
@@ -422,7 +422,7 @@ DYLD_INTERPOSE(dlopen_hook, dlopen)
 DYLD_INTERPOSE(dlopen_from_hook, dlopen_from)
 DYLD_INTERPOSE(dlopen_audited_hook, dlopen_audited)
 DYLD_INTERPOSE(dlopen_preflight_hook, dlopen_preflight)
-/*DYLD_INTERPOSE(sandbox_init_hook, sandbox_init)
+DYLD_INTERPOSE(sandbox_init_hook, sandbox_init)
 DYLD_INTERPOSE(sandbox_init_with_parameters_hook, sandbox_init_with_parameters)
-DYLD_INTERPOSE(sandbox_init_with_extensions_hook, sandbox_init_with_extensions)*/
+DYLD_INTERPOSE(sandbox_init_with_extensions_hook, sandbox_init_with_extensions)
 DYLD_INTERPOSE(ptrace_hook, ptrace)